EIP-2026-104218

This PoC demonstrates a CSRF vulnerability in CyberPanel <= v1.8.4, allowing an attacker to change the administrator's email and password via a crafted fetch request. The exploit leverages the lack of CSRF protection in the user modification endpoint.